jj/SECURITY.md
Martin von Zweigbergk db5e7dd70c docs: update SECURITY.md now that we've enabled vulnerability reporting
We enabled GitHub's private vulnerability reporting a few weeks or
months ago (for CVE-2024-51990), so there's no need to email about
vulnerabilities anymore.
2024-12-11 09:23:00 -08:00

403 B

To report a security issue, please use the "Report a vulnerability" button on this page. Our vulnerability management team will respond within 3 working days of your report. If the issue is confirmed as a vulnerability, we will open a Security Advisory. This project follows a 90 day disclosure timeline.

Feel free to email Jujutsu VCS Security at jj-security@googlegroups.com if you have questions.